Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/qRfgJ3OnWqVp9n6MmuAVEkFdw0I.roa
File: qRfgJ3OnWqVp9n6MmuAVEkFdw0I.roa (raw, json)
Hash identifier: z4ijdqK6o/r9aonAGs2f4PTbJOqb1W3B/P9cGQoGZrc=
Subject key identifier: A9:17:E0:27:73:A7:5A:A5:69:F6:7E:8C:9A:E0:15:12:41:5D:C3:42
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 0194274766329AF7A44F2F136DE41361A002
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/qRfgJ3OnWqVp9n6MmuAVEkFdw0I.roa
Signing time: Thu 02 Jan 2025 13:49:38 +0000
ROA not before: Thu 02 Jan 2025 13:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210672
IP address blocks: 88.80.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:66:32:9a:f7:a4:4f:2f:13:6d:e4:13:61:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 2 13:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a917e02773a75aa569f67e8c9ae01512415dc342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:89:ea:02:c2:ba:fa:cc:10:12:99:81:ac:
2e:3b:12:d6:3a:bd:0c:f7:28:80:f1:12:41:19:d4:
d0:6e:c2:46:45:8c:df:98:f8:4f:bc:99:5d:7f:5c:
68:98:87:4e:3b:80:c1:61:f8:dd:a6:0f:79:7e:97:
86:c0:ff:d2:89:0c:4e:b6:d5:c3:36:cb:d8:12:4e:
38:00:6f:b1:c2:c4:17:4a:cd:e4:24:66:81:27:b5:
4f:e7:14:38:e1:dc:49:62:36:a5:da:45:4d:d5:e3:
62:90:9c:d3:00:6a:bb:34:fa:50:87:22:36:f8:f2:
5a:05:c5:e6:14:5b:84:5c:63:29:25:cb:ad:25:4c:
aa:59:c8:ea:b5:28:5f:cc:fc:d7:f3:90:17:e9:9e:
e0:1f:0f:a9:a9:d5:92:c2:8f:c0:38:ed:07:f5:cc:
cd:ac:9c:e2:d7:de:64:33:a0:9a:36:50:75:da:54:
8e:ac:42:29:21:fa:be:8e:f5:df:3d:b1:df:8f:7e:
69:0f:1b:dd:c6:43:9d:f2:d3:e9:0f:bd:2e:14:5a:
cf:76:38:86:0c:33:66:9a:4e:63:ab:88:bc:f5:b8:
62:7b:0a:df:b9:1e:44:ee:63:23:6f:21:f2:45:83:
58:bf:d3:70:73:f1:0d:20:71:df:f6:17:62:e3:e5:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:E0:27:73:A7:5A:A5:69:F6:7E:8C:9A:E0:15:12:41:5D:C3:42
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/qRfgJ3OnWqVp9n6MmuAVEkFdw0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1d:b8:f8:36:07:b5:8d:3c:34:06:2e:50:6c:3e:eb:f0:70:
5c:3e:bd:86:5a:3e:03:01:87:61:8e:0b:ec:94:c8:2e:06:48:
9e:43:98:83:b0:d1:53:68:54:36:ea:60:e4:0a:02:5e:d4:33:
46:3c:d7:b4:91:e0:8a:71:b9:17:e7:4e:5b:8b:be:33:75:73:
f8:8f:d3:32:d8:d0:35:59:3a:c0:47:09:ef:a4:6c:a8:9a:2d:
82:ac:e5:65:35:e7:23:a2:60:36:c7:e3:4c:76:99:2d:d1:a0:
c7:c1:af:77:e0:bb:61:22:83:e6:4e:95:cb:5b:b0:45:91:fe:
2a:a6:1d:ad:40:73:a5:c2:9d:eb:32:66:b0:c2:92:70:6c:96:
9a:d8:93:f9:1f:1d:98:09:09:ac:0c:83:f4:2e:66:c9:d6:68:
ec:13:7e:4a:11:59:f2:58:e6:07:82:ac:bf:dc:7a:26:2f:78:
9f:4b:d4:dd:ef:aa:28:7d:bd:fe:45:41:d1:2d:d6:12:de:b9:
f6:81:e4:a4:90:82:8c:aa:f4:98:e8:e7:79:57:30:e1:25:94:
15:58:77:d2:58:28:45:97:09:60:7e:e6:b7:80:d3:56:34:7f:
c5:1f:50:ca:a4:6c:9c:a8:cb:64:e3:0f:44:67:21:76:cd:81:
f1:03:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:04 2025 by rpki-client